undone upgrade jackson-databind 41/40041/1
authorLiZi <li.zi30@zte.com.cn>
Thu, 29 Mar 2018 06:02:54 +0000 (02:02 -0400)
committerLiZi <li.zi30@zte.com.cn>
Thu, 29 Mar 2018 06:02:58 +0000 (02:02 -0400)
According to the nexus IQ reports some other security issues caused by upgrade jackson-databind.

Change-Id: I6cfebcdd104c47304185fde024105edea473042c
Issue-ID: AAI-592
Signed-off-by: LiZi <li.zi30@zte.com.cn>
pom.xml

diff --git a/pom.xml b/pom.xml
index ae2bf31..42abe4b 100644 (file)
--- a/pom.xml
+++ b/pom.xml
                                <artifactId>hibernate-validator</artifactId>
                                <version>5.4.2.Final</version>
                        </dependency>
-                       <dependency>
-                               <groupId>com.fasterxml.jackson.core</groupId>
-                               <artifactId>jackson-databind</artifactId>
-                               <version>2.9.5</version>
-                       </dependency>
+                       
             <!-- jersey -->
             <dependency>
                 <groupId>org.glassfish.jersey.core</groupId>